BRIEFLeakhighP54
689,000 records from French PajEmploi (urssaf.fr) leaked
PajEmploi / URSSAF (France)
Detected5 November 2026 · 22:43 UTC
DarkForums user Halvvutir published a database reportedly containing 689,000 records tied to PajEmploi, the French URSSAF portal used for declaring and paying domestic employees. The data likely includes employers, employees, social-security identifiers and salary information, a rich target set for tax-themed phishing and fraud. French public-sector payroll exposure also matters to European organisations handling similar data.
CategoryLeak
Severityhigh
Priority score54
Detected5 November 2026 · 22:43 UTC
LeakPriority 44
Venta de base de datos inmobiliaria de California con 1,9 millones de registrosA BreachForums seller is advertising a dataset of roughly 1.9 million California real estate records, likely a compiled list of property owners and related contact data. While not tied to a single named company, records of this type expose homeowners to targeted phishing, mortgage and title fraud, and solicitation scams. Defenders in US real estate and title insurance should treat it as available material rather than a confirmed breach.LeakPriority 80
Base de datos de ciudadanos y policía de Tlaquepaque a la ventaA BreachForums actor posted what is presented as a complete database of the municipality of Tlaquepaque, Jalisco, combining citizen records with police personnel data. If authentic, it exposes resident identifiers and contact details alongside law-enforcement identities, enabling identity fraud, doxxing and targeted attacks against local officials. Mexican municipal leaks of this scale typically get reused for extortion, SIM-swap and impersonation campaigns against citizens and officers alike.LeakPriority 58
Base de datos de Colombia a la venta en DarkForumsOn 5 November 2026, user M1y4ku posted 'DB colombia-OFB' in DarkForums' Databases section, advertising a Colombian database. The entity behind the data is not named, but any freshly presented Colombian dataset can contain citizen or organizational records relevant to national defenders. Analysts should obtain a sample to identify the affected organization and scale before it circulates further.LeakPriority 72
Filtración FortiBleed 2026 expone credenciales de FortinetA database leak labeled FortiBleed 2026 was published on DarkForums' Databases section on 5 November 2026 by user Roxym3ln. The naming strongly suggests exposure of Fortinet/FortiGate VPN credentials and configuration data, which are widely deployed to protect government, military and critical-infrastructure networks across Latin America. Leaked VPN credentials are a direct initial-access vector for perimeter compromise.LeakPriority 38
Filtración de la base de datos de pasaportes de IsraelA SpyHackerz thread by user spainfederal offers what is described as a full Israeli passport and identity database, published in July 2026 and still circulating. If authentic, it would expose passport numbers, national IDs and personal details useful for identity theft and border-fraud schemes. The post is roughly four months old, so it is a background reference rather than a fresh alert.LeakPriority 46
Base de datos de 125 GB con SSN de EE. UU. publicadaDarkForums user Halvvutir posted a 125 GB dataset advertised as a US Social Security Number database, the kind of bulk identity material used for synthetic identity fraud, account takeover and loan fraud. It is not tied to a single named organisation, so attribution is impossible, but its scale makes it relevant for fraud and KYC teams. Latin American firms serving US customers or handling US identifiers should account for downstream abuse.